CVE-2024-32008

A vulnerability has been identified in Spectrum Power 4 (All versions < V4.70 SP12 Update 2). The affected application is vulnerable to a local privilege escalation due to an exposed debug interface on the localhost. This allows any local user to gain code execution as administrative application user.

Score

CVSS 4.0 8.5 High

Status

Deferred - productcert@siemens.com

Published

2025-11-11

Last modified

2026-10-23

Weaknesses

CWE-648

Affected products

• Spectrum Power 4 (Siemens)

References

• https://cert-portal.siemens.com/productcert/html/ssa-339694.html